Re: Slicing and Dicing in new-esp

[Naganand Doraswamy <naganand@xxxxxxx>]

Ran
>
>I concur. This is the "cryptographically right" way to do it.
>A transform gets as much keying material as it needs from the 
>key exchange module, and is responsible to slice it and use 
>it in the correct way. In the case of ESP this means to 
>partition the keying material to two DISJOINT parts,
>hand one part to the authentication algorithm  and the other part to 
>the encryption algorithm.
>
>
This is what we agreed in the working group. The transform knows how many
bits it requires.  The transforms need to define how they are going to split
the keying material into disjoint parts. They may have to check for weak
keys etc.

--Naganand
----------------------------------------------------------------
naganand@ftp.com
Tel #: (508)684-6743 (O)